Improper input validation in Apple macOS
CVE-2018-0387
A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute arbitrary code on the user's device, possibly with elevated privileges. The vulnerability occurs because Cisco Webex Teams does not properly sanitize input. An attacker could exploit the vulnerability by sending a user a malicious link and persuading the user to follow the link. A successful exploit could allow the attacker to execute arbitrary code on the user's system. Cisco Bug IDs: CSCvh66250.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.031 (86.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Apple Macos
- Cisco Webex_teams
- Microsoft Windows
- N/a Cisco Webex Teams Unknown — versions Cisco Webex Teams unknown
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (vdb-entry, Broken Link, x_refsource_BID)
Frequently asked questions
- What is CVE-2018-0387?
- CVE-2018-0387 is a high-severity vulnerability in Apple macOS, classified under Improper Input Validation. CVSS score: 8.8/10. Published 2018-07-18.
- How severe is CVE-2018-0387?
- High severity. CVSS v3 base score is 8.8 out of 10.